Model Call – Vienna Fashion Week 2026 & Pre-Presentation
Last updated: August 2026
This policy applies to applications submitted through the online form „MODEL CALL NICOLAS DUDEK“.
1. Controller
The controller for the processing of your data under the General Data Protection Regulation (GDPR) is:
NICOLAS DUDEK
Marinelligasse 10-10A
1020 Vienna, Austria
Email: mail@nicolas-dudek.com
Important note: This casting call is run solely by the controller named above. It is not an event of Vienna Fashion Week and is not affiliated with its organisers or with any other label showing there. The dates mentioned refer exclusively to the label’s own show and its own shoots. The organisers of Vienna Fashion Week are neither controllers within the meaning of the GDPR nor do they receive access to your application or your data.
2. What data we process
If you apply through the form, we process only the data you provide or upload yourself:
• Basic details: first and last name, age, gender (optional – „prefer not to say“ is available)
• Contact details: email address, phone number, Instagram handle
• Your location (city, country) and your availability on the two project dates
• Casting details: height, measurements (bust/chest, waist, hips), shoe size, agency if any
• Images and video: the polaroids/digitals and the walking video you upload
• Technical data: the time of submission and the email address linked to your Google account (Google Forms only allows file uploads while signed in)
We deliberately do not ask for special categories of personal data under Art. 9 GDPR (e.g. health data, religious or political beliefs, ethnic origin). Please do not provide such information unprompted.
3. Purpose and legal basis
We process your data solely to review your application, to cast the two projects named in the form
(Pre-Presentation on 10 September 2026 and the Vienna Fashion Week show on 18 September 2026, including the related shoots) and to get back to you.
The legal basis is your consent under Art. 6(1)(a) GDPR, given when you submit the form. If we end up working together, further processing is based on the initiation and performance of the contract under Art.
6(1)(b) GDPR.
Providing your data is voluntary. However, without the fields marked as required – in particular the polaroids and the walking video – we cannot properly assess an application and therefore cannot consider it.
4. Recipients and processors
The form is provided through Google Forms; your answers and uploaded files are stored in the controller’s Google Drive. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as a processor under Art. 28 GDPR. Processing on servers outside the EU/EEA, in particular in the USA, cannot be excluded; Google relies on the EU Commission’s Standard Contractual Clauses and on the EU-US Data Privacy Framework for such transfers.
Only the controller and the members of the production team directly involved in the casting have access to applications. Your application will not be passed on to any other third party, published or used for. Your data is never sold and is not used for automated decision-making or profiling.
5. Retention period
We keep your application and uploaded files for a maximum of 12 months after the casting and delete them completely afterwards. If you are booked for one of the projects, contract- and accounting-related documents may be kept for as long as statutory retention periods require. On request we will of course delete your application earlier at any time.
6. Images and video
The polaroids and walking video you upload are used exclusively for internal assessment during the casting. This material will not be published – neither on social media nor on the website or in press materials.
If we work together, the usage rights to any material created during the show and the shoots will be agreed with you separately and in writing (model release). Your application alone does not grant us any rights to your images.
7. Your rights
You have the following rights towards the controller:
• Access (Art. 15 GDPR) — what data we hold about you
• Rectification (Art. 16 GDPR) — correction of inaccurate or incomplete data
• Erasure (Art. 17 GDPR) — the „right to be forgotten“
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR) — a copy in a common format
• Objection (Art. 21 GDPR) to certain processing
An informal email to the address in section 1 is enough. We reply within the statutory period of one month.
8. Withdrawing your consent
You can withdraw your consent at any time, without giving reasons, with effect for the future. Just send us an email – we will delete your application including all uploaded files and confirm the deletion to you. This does not affect the lawfulness of processing carried out before the withdrawal.
9. Right to lodge a complaint
If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.
10. Data security
Your data is transmitted in encrypted form (TLS/HTTPS). Access to the storage location is protected by a Google account with two-factor authentication and limited to the people named in section 4.
11. Changes to this policy
We update this privacy policy when our processing or the legal situation changes. The version available at the time of your application applies.